The official blog for Windows Server Essentials and Small Business Server support and product group communications.
[Today's post comes to us courtesy of Damian Leibaschoff from Commercial Technical Support]
As you all know, a successful synchronization from a mobile device using SSL requires that the device trusts the certificate installed in SBS. If we are using the self-issued certificate that is automatically generated when the Internet Address Management Wizard is completed then we will need to complete steps in the phone to get the root certificate properly installed so it can trust the self-issued certificate on the server, this is not required if using a third party trusted certificate from a well-known public certification authority and this is the recommended solution for SBS.
If we must use a self-issued certificate, there are multiple ways to accomplish the same end result of getting the device to trust it. Our goal is to get the certificate from \\server\public\downloads\Certificate Distribution Package\SBSCertificate.cer into the phone so we can install it.
With Windows Phone 7 you could attach the file as part of an email sent to a Windows Live (@hotmail.com for example) account that is already configured and synching on the phone, once the e-mail is received by the phone, you can install the cert by just tapping on the attachment.
You can also get to the certificate directly from the phone using Internet Explorer. For this, you can follow these steps:
When the iPhone syncs with Exchange Activesync, it causes the iPhone to lock and require a code to unlock. This feature is controlled by Exchange and cannot be changed on the iPhone. I believe the setting may be modified if I can get the self-signed certificate on the phone. I am seeing a lot of guidance anywhere on this. Can you help?